Author Topic: Repeated notices of blocked Malware and TroganHorse  (Read 3971 times)

0 Members and 1 Guest are viewing this topic.

Mahree

  • Guest
Repeated notices of blocked Malware and TroganHorse
« on: November 19, 2012, 02:16:11 PM »
For a few days now I have been receiving 1 malware and 2 troganhorse notices of avast blocking.  I also have received several of the same blocking notice from malwarebytes.  URL 194.8.75.57

I guess I don't know how to do an attachment or a screen shot to this message.

Mahree


 



Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89439
  • No support PMs thanks
Re: Repeated notices of blocked Malware and TroganHorse
« Reply #1 on: November 19, 2012, 02:34:02 PM »
Can you post a screenshot of the avast alert (just the alert window not a full screenshot).

When you reply use the Attachments and other Options to attach your screenshot.

####
This needs further analysis by a malware removal specialist:
Go to this topic http://forum.avast.com/index.php?topic=53253.0 for information on Logs to assist in cleaning malware. Use the information about getting and using the tools and attach the logs here, not in the LOGS topic.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Mahree

  • Guest
Re: Repeated notices of blocked Malware and TroganHorse
« Reply #2 on: November 19, 2012, 05:26:50 PM »
I am having a difficult time with attachment.  If this doesn't do it I will try again.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89439
  • No support PMs thanks
Re: Repeated notices of blocked Malware and TroganHorse
« Reply #3 on: November 19, 2012, 06:43:01 PM »
Well you got the hang of the attachments (but attached it twice), unfortunately it is too small to read. We can't see what the Process responsible for the connection is or the URL so we can check it out.


Not sure how you captured the screenshot, using Alt+PrtScr, copies only the active window (if that is the alert window), then save as a jpg, etc. That way we get to see it at its normal size.

Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Mahree

  • Guest
Re: Repeated notices of blocked Malware and TroganHorse
« Reply #4 on: November 19, 2012, 09:39:30 PM »
I am sorry.  I have repeatedly attempted to capture the active screen.  I can get the entire screen and paste it to paint.  The directions I am following say to hold the alt key and click on print screen.  I still get the entire screen.  I am not very knowledgeable about all of this. 

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89439
  • No support PMs thanks
Re: Repeated notices of blocked Malware and TroganHorse
« Reply #5 on: November 19, 2012, 09:49:49 PM »
OK after a great deal of squinting and a bit of imagination, I think I understand the problem.

-- Avast alerting on Viacom anti-phishing filter - urlfilter.vmn.net 99999999-m-list.
Hello,
it is still the same story: non-crypted database of malicious URLs used by visicom antiphishing.

Milos

Does that ring any bells ?
Do you have an anti-phishing application/plug-in installed ?

I believe that you have sufficient anti-phishing protection in avast's network, web shields and WebRep. Plus if you are using firefox (and some other browsers) provides some anti-phishing protection.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Mahree

  • Guest
Re: Repeated notices of blocked Malware and TroganHorse
« Reply #6 on: November 19, 2012, 10:42:54 PM »
Maybe this will work.  I don't know what to do.  How do I find out if I have an anti-phishing application/plug-in installed?  I am using Google Chrome.  So what do I do?  Will these threats go away after awhile?  Do I need to keep seeing them in order to have them blocked?  Thank you for having patience with me.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89439
  • No support PMs thanks
Re: Repeated notices of blocked Malware and TroganHorse
« Reply #7 on: November 19, 2012, 10:49:44 PM »
Read what is mentioned in the quoted text of my last post, Milos is one of the avast virus labs.

The recommendation is that you check for visicom antiphishing (or similar program name) in windows programs and features/add remove programs and uninstall it.

There are a few other topics related to this problem, so a forum search on visicom and or urlfilter.vmn.net should give more information.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Mahree

  • Guest
Re: Repeated notices of blocked Malware and TroganHorse
« Reply #8 on: November 19, 2012, 11:50:48 PM »
Thank you for your help and patience. 
Mahree

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 89439
  • No support PMs thanks
Re: Repeated notices of blocked Malware and TroganHorse
« Reply #9 on: November 20, 2012, 12:13:02 AM »
You're welcome.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.6.6121 (build 24.6.9241.848) UI 1.0.809/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security